The WU-FTPD FTP server Unofficial Patch Page

Last update: 7 January, 2012

WU-FTPD is a long-lived replacement FTP server daemon for UNIX systems.
It was first created at Washington University in St. Louis during the early
days of the Internet prior to the network going commercial.

Over the years successive people have inherited the codebase and passed it on
amongst themselves, until ultimately it ended up in limbo in late 2001 from a
public view. Several security patches were subsequently released but the
development continued quietly until wu-ftpd.org went offline.

Since then various people (including some members of the WU-FTPD Development
Group) have contributed some patches and enhancements to the code. Since
2002, one production site, ftp.nrc.ca, has been operating on the modified
codebase with great success. While some would say that it is time to
make those modifications public, the first order of business is to
consolidate security patches.

Today the latest official release by the WU-FTPD Development Group still
remains at 2.6.2, with various vendors releasing patches for their own
copies of wu-ftpd. The software comes with its own
license. The first release, -CC1, is simply the latest CVS snapshot
extant before the main site went offline, plus some slight fixes. See the
roadmap below for more details. The version number commences with 2.8.0
since 2.7.0 was not an official release.

The Canadian Contigent Release

This is the start of a new series of patches, done along the same tradition
as previous ones before it (ACADEM, VR, etc.). As described in the README.CC note, this patch series aims to continue the
work done before and consolidate outstanding patches.

The following is a release of the WU-FTPD server, with the higher CC number
being the latest version:

Future Releases and Roadmap

Future releases are being considered to incorporate many downstream patches
collected around the Internet (including the ones below if not already included)
and contributed by various UNIX variants. The next planned releases will
include:

CC1 - Released April 22, 2009

First release based on original CVS codebase with latest security
patches applied. This will likely be a reference patch acting as a
base for all proceding patches. It is also a candidate for rigorous
testing of its various features.

CC2 - Released June 26, 2009

Patches for timed access classes, patches from FreeBSD, some from Debian
plus some portability patches and other fixes; Updating of GNU
autoconf/automake build mechanism; autobuf patch.

Tested platforms

The following operating systems and platforms have been used to test releases:

Linux/x86

Solaris 9/sparc

FreeBSD 7.x/x86

Other Patches for the WU-FTPD FTP server daemon

Here are some patches (applied against the 2.6.2 codebase) that the user
community have released over the years and are kept here for reference:

Autobuf tuning, by NLANR. Their page on Autobuf explains the reasoning behind the patch. Also handy is the patched NCFTP client. (Note that this patch applies against version 2.6.1.) Instructions on how to use it.

References

Contact

You can contact the maintainer of this page and patches at: with 'WU-FTPD' in the Subject line of your email. Please note that
we cannot answer end-user support requests: Instead use a search engine
to seek the WU-FTPD discussion list archives as most answers are found
there. Note also that if you are using a packaged version of WU-FTPD, you
should ask the package maintainers first about any problems you experience,
as we cannot speak for their (likely) modifications.